Extracted

• • Target

    f201a2c044026e948f92ff625bc83e1f_JaffaCakes118

  • Size

    151KB

  • MD5

    f201a2c044026e948f92ff625bc83e1f

  • SHA1

    cf4923de7a15f1d91090e2049d0caa343b8b7b63

  • SHA256

    1e72ee5c21a74034982a7786815d8219738eb41a2f6d2fb662992aea0e1931e0

  • SHA512

    1802865f2811a728b1db08c3dec7281a36e824062d6f03a1d9465abe4959d5534b628118e7e9087d0793a293295962825904ce987b112bdd488869a483613694

  • SSDEEP

    3072:HhLKpkFJqH8LCSCuXr+jvxEFvon+k10vpKOvxGhkEi5cxKh3tJtKNG5l4Ff5YA:HhLocWSCuXr+jGF4BhkEOt2NvdiA

  Score

  10^/10

  metasploitbackdoordiscoverytrojan

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2